Oracle AI World 2026: Oracle + OpenAI, Deep Trust and APEXlang — What It Means for Saudi Businesses

Published: 1 November 2026 · Updated: 30 October 2026 · By فؤاد الحرازي · Editorial policy

On 26 and 27 October 2026, at Oracle AI World in Las Vegas, Oracle made a set of announcements that directly affect how business systems are built and run: an expanded partnership with OpenAI, a tool for building applications without coding expertise, and a new architecture called Deep Trust that puts security rules inside the database itself. Because Riv-ERP Cloud is built with Oracle APEX on Oracle Database and hosted on Oracle Cloud, we followed the news closely. Here is what was announced and what it means for a Saudi business owner, in practical terms.

1. Oracle and OpenAI: AI inside business systems

According to Oracle’s official announcement of 27 October 2026, the partnership combines OpenAI models, ChatGPT and Codex with Oracle’s applications, data and cloud infrastructure. It includes:

• Oracle AI Workspace: a single interface bringing OpenAI models together with Oracle applications and enterprise data, so employees can find information and complete approved workflows through ChatGPT plugins, with governance, approvals and controls kept in place.
• Oracle App Composer: lets employees build enterprise applications without coding expertise using Codex, with Oracle handling deployment and operations on OCI, including identity, permissions and audit.
• APEXlang: an Oracle technology supported by App Composer, which Oracle says delivers fast generative development without producing hard-to-maintain code.
• Oracle AI Security Mesh: a managed service using OpenAI cyber models to find and fix vulnerabilities across OCI, other clouds and on-premises environments, within a scope the customer defines.
• Oracle AI SMB Bundle: a free-to-start package for small businesses with annual cloud credits, subject to terms and restrictions.

Worth knowing: the announcement gives no general availability dates, includes a disclaimer that features, timing and pricing may change, and gives no regional availability details for the Kingdom.

2. Deep Trust: security rules in the database, not in the AI agent

In its 26 October announcement, Oracle introduced the Deep Trust AI Architecture, which builds trust into four layers: the software platform, data, data access and application development. Its components include:

• Deep Data Security: end-user access rules defined inside Oracle AI Database and applied to every SQL request, with verification of each user’s identity.
• SQL Assertions: business-rule enforcement in the database; Oracle’s example is blocking a charge above an employee’s spending limit.
• Deep Trust Data APIs: governed access for applications and agents to specific business objects such as purchase orders, instead of arbitrary SQL.

The core idea matters to every finance manager: do not rely on an AI agent behaving well. Make permissions and approval rules part of the system itself, so no program can bypass them.

3. APEXlang: APEX applications as readable files

APEXlang is not entirely new. Oracle introduced it on the APEX blog in May 2026 with release 26.1, describing it as a declarative application definition language readable by people and AI. Instead of one large SQL script, an application is exported as a package of files that can be reviewed, diffed and merged with standard source-control tools. On 6 October 2026, APEX 26.2 added importing individual APEXlang files (a page or shared component) without importing the whole application, which Oracle recommends mainly for development and testing. What AI World added is the Deep Trust description of how the APEX AI Application Generator turns natural-language descriptions into APEXlang while APEX’s central runtime executes it: AI writes the definition, not the execution code.

What this means for Saudi businesses

For SMEs

AI in business systems is moving from chatbots to taking actions inside the system. That raises the value of one question: is your data organised in one system with clear permissions? Any AI tool will only be as good as the data it reads.

For finance teams

Deep Trust’s message is aimed at you: controls such as spending limits, approvals and segregation of duties belong in the system, not in instructions given to a person or an AI agent.

For IT teams

APEXlang brings APEX applications closer to modern development practice: reviewing changes, managing versions and working with AI assistants under developer oversight.

Before you switch on any AI tool over your data

1. Define the permitted data: what can the tool read, and what must never leave your system?
2. Tie the tool to user permissions: an AI agent should see no more than the employee using it.
3. Keep approvals human for financial decisions: payments, discounts and invoice cancellations.
4. Require a clear log of every action the tool takes: who requested it, when, and what changed.
5. Mind personal data protection and Saudi regulatory requirements when using external services.

Where Riv-ERP Cloud stands

Riv-ERP Cloud runs on the same platform these announcements address: Oracle APEX on Oracle Database, hosted on Oracle Cloud, used from the browser with nothing to install. Oracle’s emphasis on putting controls inside the system matches what Riv-ERP already provides:

• Users, roles and permissions per module.
• Approval groups and rules.
• Accounting transaction audit, a log of deleted transactions, and edit rights.
• One database for every department: sales, inventory, accounts and payroll are linked, and the journal entry is generated from the transaction itself.
• 360 dashboards for sales, inventory, purchasing, finance, projects and HR.

We follow and evaluate the newly announced features as we do with every platform release, and we do not promise them inside the system before they are tested and officially available. Read the Riv-ERP Cloud guide, or if you prefer a server at your premises, see the edition comparison.

Frequently Asked Questions